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METHOD OF MONITORING THE ACTIVATION OF PROGRAMMED 
SBQUENCES OF A PROGRAMMED SYSTEM AND COMPUTER PROGRAM 
AND APPARATUS FOR IMPLEMENTING SAME 

Backgronncl of the invention. 
1. Fielcl of the invention. 

The present invention relates to software 
5 controlled systems, and inore particularly to means for 
monitoring the proper execution of programmed sequences 
triggered by an external or internal event* 

A software controlled system may te required to 
perform bacXground tasks in response to certain 

10 specific triggering events, such as a signal received 
from an outside source, a timing signal from built-in 
timer, etc- These events must often be processed as 
soon as they arrive. This gives rise to an 
interruption in a main program: an event comes up 

15 causing an interrupt routine to be executed, after 
which the system returns to its main program* In other 
words, an interrupt routine is a set of instructions 
which is triggered in response to the arrival of an 
event and causes an interruption in main program. 

20 2. Prior art 

In the prior art^ a problem arises when a 
programmed system such as a microprocessor or 
microcontroller unit (MCU) operates in a noisy 
environment susceptible of upsetting the execution of 

25 its program. As an example, this situation can arise 
in a monitor display unit housing a display device, 
such as a cathode ray tube (CRT) , and microprocessor- 
controlled drive circuitry. The latter is used both to 
interface the display device with the video input and 

30 to provide user functions for controlling display 
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parameters (e.g. contrast, color, brightness, image 
distortion correction, image positioning etc.) through 
pushbuttons and/or on screen menus. 

In this environment, the high voltages generated 
5 for the CRT can produce electrostatic or 
electromagnetic noise, often in the form of spikes, 
that can deprogram or corrupt internal circuits or 
peripheral circuits of the microcontroller, such as the 
program registers, internal memory etc. When this 

10 happens, there is no automatic diagnostic tool which 
can inform of the failure. In particular, a noise- 
induced disruption can stop or prevent the execution of 
one or several interrupt routines, in the example, 
this could cause the monitor to become blocked in an 

15 undetermined or even dangerous state, 

SumiriMy of the invention with objects. 
In view of the foregoing, it is an object of the 
invention to provide means capable of ensuring that 
interrupt routines that are critical for the operation 

20 of a programmed system can be monitored systematically 
and reliably* 

The invention achieves this object by an approach 
based on using the different interrupt routines of a 
programmed system to monitor each other. In this way, 

25 a failure in the execution of a monitored interrupt 
routine would be detected by another interrupt routine 
(this one having been correctly triggered) ♦ The 
detection can then be used to reset or reboot the 
program and thus resume normal functioning on a sound 

30 basis* 

According to a first aspect, the invention provides 
a method of monitoring the activation of programmed 
sequences of a programmed system comprising at least a 
first and a second programmed sequence, each to be 
35 executed iteratively, wherein the first programmed 
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sequence is made to monitor the ^icecution of the second 
programined sequence, and the second prcgrammed sequence 
is made to monitor the first programmed sequence* 

The programmed sequences are advantageously taken 
5 from the group consisting of: routines, such as 
interrupt routines, and main program loops > For 
instance, it may comprise at least one interrupt 
routine triggered by an event generated by a timer or 
an external signal* 

a preferred embodiment, the first programmed 
sequence incorporates the steps of resetting a first 
counter associated therewith and incrementing a second 
counter associated with the second programmed sequence y 
and the second programmed sequence incorporates the 

15 steps of resetting the second counter and incrementing 
the first counter, a failure in the activation of a 
particular programmed sequence being detected when a 
counter associated with that sequence reaches a 
predetermined threshold. 

20 The predetermined threshold for a given counter can 

be established so as to be reached upon just one 
failure of the associated programmed sequence to reset 
that counter, 

A detected failure in the activation of a 
25 programmed sequence can be made to cause a complete or 
partial reset of the programmed system. 

According to a second aspect, the invention 
provides a method of monitoring the activation of N 
programmed sequences in a programmed system, each to be 
30 executed iteratively, N being an integer greater than 
1, wherein each of the N programmed sequences is 
monitored by at least one other programmed sequence. 

Each of the N programmed sequences may in this way 
be monitored by each of the N-l other programmed 
35 sequences. 
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This can be achieved by having each px-ogramined 
sequence perform the monitoring function by 
incrementing a value in a respective counter associated 
with each prograxEimed sequence it monitors and by 
5 checking^ for each counter^ that the corresponding 
value has not reached a predetermined threshold, each 
luonitored programmed sequence resetting the counter 
associated therewith, so that a failure in the 
activation of a particular programmed sequence is 

10 detected when a counter associated with that sequence 
reaches a predetermined threshold* 

According to a third aspect, the invention provides 
a computer program comprising at least a first and a 
second programmed sequence, each to be executed 

15 iteratively, wherein the first programmed sequence 
incorporates instructions for monitoring the execution 
of the second programmed sequence^ and the second 
programmed sequence incorporates instructions for 
monitoring the first programmed sequence* 

20 According to a fourth aspect, the invention 

provides a computer program comprising N programmed 
sequences^ each to be executed iteratively, N being an 
integer greater than 1, wherein each of the programmed 
sequences is monitored by at least one other programmed 

25 sequence. 

According to fifth aspect, the invention provides a 
medium containing the aforementioned program. 

According to a sixth aspect, the invention provides 
a programmed apparatus for executing iteratively at 

30 least a first and a second programmed sequence, 
comprising first means associated with the first 
programmed sequence to monitor the execution of the 
second programmed sequence^ and second means associated 
with the second programmed sequence to monitor the 

35 first programmed sequence « 
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According to a seventh aspect, the invention 
provides an apparatus for executing at least N 
progrartmied sequences, esach to be estecuted iteratively, 
N being an integer greater than 1, wherein each of the 
5 N programmed sequences is monitored by at least one of 
the N^l other progranimed sequences. 

The apparatus can be made to implement the optional 
features mentioned above in the context of the method. 

Brief description of the drawings 
10 The invention and its advantages shall be more 

clearly understood from reading the following detailed 
description of the preferred embodiments, given purely 
as non-limiting examples, with reference to the 
appended drawings in which: 
15 - Fig.l is a symbolic representation of a 

pr-ogrammed system for executing a main program loop and 
triggered routines, in which the invention can be 
implemented; 

- Fig, 2 is a diagram showing a CRT monitor unit in 
20 which the exemplary embodiment is implemented, 
connected to a personal computer (PC) ; and 

Fig, 3 is a flow chart showing how two routines 
can monitor each other in accordance with the 
invention. 

25 Detaileta description of the preferred embodiments- 

An example of a programmed system in which the 
invention can be implemented is illustrated 
symbolically in Fig, 1, The programmed system 2 is 
e.g. a microprocessor or microcontroller unit (Mcu) set 

30 to execute a program stored in a main memory area (not 
shown) by means of an arithmetic logic unit ALU. Here, 
the program is composed of a main program loop ML and N 
interrupt routines Rl-KN, The main program loop ML 
forms the core of the stored program insofar as it is 

35 executed systematically and cyclically* The interrupt 
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routines Rl-RN are parts of the program that are 
executed upon heing called. In the example, these 
routines Rl-RN are called by respective events Il-IN", 
referred to as interrupt events. The interrupt events 
5 can be external ^ such as control or detection signals 
supplied to the programmed system, or internal, e.g. 
from built-in timers. 

In the absence of interrupt events, the ALU 
executes the main program loop from a starting point SP 

10 to an end point EP, looping back from the latter to the 
starting point. The stepping through the main program 
loop is performed by a pointer P which reads 
sequentially through instructions stored in a main 
program register 4 . 

IS Upon occurrence of an interrupt event, the ALU 

immediately interrupts the main program loop ML to 
execute instead the corresponding routine. It 
thereafter returns to the main program loop ML from the 
point it left off at the interruption to resume 

20 execution of the main program loop. 

In the illustrated example, the pointer P is at 
instruction K of the main program loop ML when an 
interrupt event li appears. In response, the 

programmed system brings the pointer P immediately to 

25 the start point of a portion where the corresponding 
routine Ri is stored (arrow 6) so as to step through 
the program instructions of the latter- Once the end 
point of routine Ri is reached, the pointer P is 
returned to instruction k of register 4 (arrow 8) to 

30 resume execution of the main program loop (assuming 
that instruction k was not executed at the time of 
interruption) . The interrupt and routine execution 
procedures are the same for any of the other routines 
Rl-RN. 
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There shall now be explained how the invention can 
be impleTaented in such a programmed system* However, 
to siinplify the description, only two interrupt 
routines (designated Rl and R2) shall be considered. 
5 It shall foe assumed that each of these two routines is 
called up at regular intervals by interrupt events II 
and 12, produced e.g. by tiiner signals. 

In the example, the programmed system 2 happens to 
be installed in a CRT monitor unit 10 connected to a PC 

10 12 via a cable link 14, as shown in Fig*2* The CRT 
monitor unit includes a CRT together with its high- 
voltage drivers which constitute a source of 
electromagnetic or electrostatic discharge (ESD) noise 
spikes. This noise can cause some of the interrupt 

15 routines to fail, e.g, by not responding to their 
interrupt events. The embodiment serves to ensure that 
such a failure can be detected and appropriate measures 
can be taken in response, e.g. by resetting the 
microcontroller . 

20 The programmed system is based on a microcontroller 

unit (Mcu) configured to manage the housekeeping and 
user functions of the monitor unit- 

In particular, interrupt routine Rl is programmed 
to cooperate with circuitry for periodically sensing 

25 the presence of line and/or frame synchronization 
signals sent by the PC on the cable link 14^ in order 
to set the monitor in a standby or energy saving mode 
automatically in the absence of these signals. 

Interrupt routine R2 is programmed to scan 

30 periodically the state of a control panel 16 at the 
front of the display in order to react appropriately 
upon activation of a pushbutton or similar adjusting 
device 18. Typically, the control panel 16 allows the 
user to set the display brightness^ contrast, geometric 

35 distortion correction, degaussing, etc. 
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Note that the interrupt evont is not the 
disappearance of the synchronisation signals or the 
activation of a pushbutton, but periodic signals to 
start the respective routines Rl and R2* These signals 
5 can be produced by a timer which is either internal or 
external to the microcontroller. 

The main program loop ML takes care of the normal, 
steady-state operation of the monitor* 

In accordance with the invention, interrupt 

10 routines Ri and are provided with the additional 
function of mutually monitoring each other. 
Specifically^ routine Rl is also programmed to checlc 
that routine R2 is periodically triggered for scanning 
the state of the control panel 16, and routine R2 is 

15 also programmed to check that routine Rl is 
periodically triggered for sensing the presence of the 
synchronization signals* 

It shall be assumed that in normal, error-free, 
operation routine Rl is triggered every 1 millisecond 

20 (by interrupt event II) and routine R2 is triggered 
every lo milliseconds (by interrupt event 12) . 

Fig- 3 is a flow chart showing how the mutual 
monitoring is implemented for each of the routines Rl 
and R2. The concept is based on each routine causing a 

25 counter in the other routine to be incremented while 
resetting to zero its own counter, and determining a 
failure condition if the counter of the other routine 
reaches a maximum admissible value. 

In the example, the mutual monitoring functions are 

30 implemented before the execution of the routines per 
se- Considering the case of routine Rl, say, the 
procedure starts by resetting to zero an internal 
counter 1 associated to routine Rl (step S2). This 
counter is incremented by one unit each time routine R2 

35 is activated. 
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Next, the value in the internal counter 2 of 
routine is compared with a maximum admissible value 
MAXI (step S4) , If counter 2 has not reached this 
value, it is deduced that this is because routine R2 
5 was triggered when it was last expected to be 
triggered, so resetting counter 2 in the process before 
the value MAXI could be attained. 

The value of counter 2 is then incremented by one 
unit (step S6) . 

10 Thereafter, the routine per se is executed^ i-e, 

sensing the presence of the line and fraxae 
synchronization signals (step S8) , 

If the comparison step S4 reveals that counter 2 
has reached the maximum value MAXI, it is deduced that 

15 routine has not been triggered the last time it 
should have been, and thus could not reset in time that 
counter 2 to zero- Upon detecting this failure to 
trigger routine R2, the procedure causes the 
microcontroller to reset (step Sio) . 

20 The mutual monitoring procedure at the level of 

routine K2 mirrors that of I^i, with counter 1 changed 
to counter 2 and vice versa; equivalent steps in the 
flowchart are designated with the same reference 
numerals, followed by a prime sign. Thus, counter 2 is 

25 reset to zero at step S2 ' , the comparison step S4 * is 
carried out with the value of counter 1, and counter l 
is incremented at step S6'* 

Table I below summarizes the evolution of values in 
counters i and 2 over successive triggerings of 

30 routines Rl and R2 when no failure occurs* 

Table I: evolution of counter 1 aind 2 values. 
Normal operation: routine Rl interval = 1 ms, 
Routine R2 interval = 10 ms- 

Pont- i np rnnnter 1 Counter 2 
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Rl 
Rl 
Rl 

Rl 



Rl 
R2 
Rl 

10 

Rl 
R2 
etc. 

15 

It can be seen that for a coinparison value MAXI set 
to 10 or more, none of the counters ever reaches that 
value under error free operation. 

For KAXI = 10 in the comparison step S4 of routine 

20 Rl, a failure to trigger routine R2 shall be detected 
by routine Rl less than one ^nillisecond later. 

On the other hand, if the same value MAXI = 10 is 
usecj in the comparison step S4 ' of routine R2 , a 
similar failure to trigger routine Rl shall be detected 

25 by routine R2 only after lo x 10 millisecond intervals* 
If this interval is too long, it is possible to use a 
smaller value for MAXI in routine R2, for instance 2, 
In general, it can be envisaged to have a specific 
comparison value MAXll, HAXI2, etc. for the comparison 

30 steps S4, S4' etc. in the different routines, to suit 
requirements- 

An example is given below of a program written in c 
language for executing the monitoring functions in each 
of the routines Rl and H2, 
35 MONITORING BY ROUTINE RX 



0 
0 
0 
0 

0 

1 

0 

0 

1 



1 

2 
3 
4 

9 
0 
1 

9 
0 
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{ 

COUNTER1==0 ; 
if (C0UNTER2<MAXI) 
COUNTER2++; 

5 else 

RESET_MCU; 

} 

MONITORING BY ROUTINE R2 

{ 

10 C0UKTER2=0; 

if ( COUNTER KMAXI) 
C0UNTER1++; 

else 

RESET_MCU; 

15 } 

The above description can easily be extrapolated to 
any arbitrary number N of subroutines eacli jfnonitoring 
each other. 

For instance, each of the N routines of Fig.l can 
20 be programmed to jnonitor the N-1 other routines* In 
this case, steps S4 and S5 of figure 3 would be 
repeated for each of the monitored routines, so that in 
the case of routine Ri, say, we would have: for i = 2 
to "counter i < MAXIi and "counter i - counter 

25 i+1"^ with a branching to reset the microcontroller 
(step SIO) for a negative answer at any one of steps 

S4- 

It is also possible to arrange for each of the N 
routines involved in the monitoring procedure to 
30 laonitor just one or a group of other routines. For 
instance a routine Ri can be set to inonitor just 
routine Ri+1, with routine RN monitoring routine Rl to 
provide the ** round robin" condition* 

Moreover, the monitoring according to the invention 
35 need not be limited to routines among themselves. It 
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can also involve one or several main program loops ML 
in the mutual monitoring function. For instance, in 
the exajnple of figure 1^ tJie main program loop ML can 
also include a set of program instructions to perform 
5 the steps S4 and S6 of figure 3 for each or some of the 
N routines Rl-RN^ as explained above. In this way, the 
main program loop can actively monitor each of the 
routines and cause a reset of the microcontroller 
should one or a number of these routines fail. This 

10 function can foe useful for situations where a fault 
causes a crash of all the interrupt routines Rl-RN, but 
not the main program loop* 

Conversely, each or some of the interrupt routines 
Rl-RN can be made to monitor the main program loop ML* 

Z5 The latter would then also have its own counter that 
would be reset at each cycle of the main program loop 
and be incremented by the monitoring routines . 

It will be understood that where a routine or main 
program loop is monitored by more than other, the value 

20 MAXI for that loop should be adapted accordingly* 

The action taken when a failure is detected need 
not necessarily be the resetting of a microcontroller* 
It can be any action suited to circumstances and to the 
characteristics of the routine or the part of the 

25 program in which the failure was detected to occur- 
For instance, the action can to trigger an alarm, send 
a warning message, switch over to a backup program, 
reset just a portion of the system, etc. These actions 
can also be different according to what is being 

30 monitored^ in which case the routines Rl-RN, and 
possibly the main loop ML, would adapt their action at 
step SIO depending on the routine being monitored. 

The interrupt routines need not necessarily be 
triggered at intervals which are regular to be given a 

35 monitoring role* The only requirement is that the 
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routine triggering event be relatively repetitive and 
expected. For instance, the event itiay normally be 
expected to occur at variable intervals with a maxiifium 
interval beyond which it can reasonably be assumed that 
5 an interrupt has not been triggered* In this way, the 
routine (s) which monitor (s) the one expected to respond 
would generate an alariu or program a reset when this 
maximum interval is exceeded. 

It is clear that the primary functions of the 

10 routines are immaterial and that the invention can be 
implemented in all sorts of different applications. 
For instance, in the described example, other loops 
involved in the monitoring function can have as their 
primary function a timer arranged to cause an indicator 

15 light to flash, or to read the state of a specific 
circuit portion to report on its condition, etc. 

In a broader context, the invention is useful for 
monitoring routines and program loops in practically 
every area of computer operated systems : machine 

20 control, communications, data exchange, consumer 
electronics, professional electronics, PC software, 
office and business management and accountancy computer 
programs, etc. 

While the invention has been described in 

25 connection with a preferred embodiment, it is to be 
understood that the invention is not limited to the 
disclosed embodiment but, on the contrary, is intended 
to cover various modifications and equivalent 
arrangements included within the spirit and scope of 

30 the appended claims* 
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WHAT IS CLAIMED IS: 

1. A method of monitoring the activation of prograinined 
sequences of a programmecj system comprising at least a 
first and a second programmed sequence/ each to be 
executed iteratively, wherein said first programmed 
5 sequence is made to monitor the execution of said 
second programmed sequence, and said second programmed 
sequence is made to monitor said first programmed 
sequence , 

10 2. The method of claim 1, wherein said programmed 
sequences are taken from the group consisting of: 
routines and main program loops- 

3, The method of claim 1, wherein said programmed 
15 sequences comprise at least one interrupt routine* 

4- The method claim 3, wherein said at least one 
interrupt routine is triggered by an event generated by 
a timer or an external signal, 

20 

5. The method of claim 1, wherein said first 
programmed sequence incorporates the steps of resetting 
a first counter associated therewith and incrementing a 
second counter associated with said second programmed 

25 sequence, and said second programmed sequence 
incorporates the steps of resetting said second counter 
and incrementing said first counter^ a failure in the 
activation of a particular programmed sequence being 
detected when a counter associated with that sequence 

30 reaches a predetermined threshold. 
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6. The method of claim 5, wherein said predetermined 
threshold for a given counter is established so as to 
be reached upon just one failure of the associated 
prograuitned sequence to reset that counter. 

5 

7* The method of claini 1, whisrein a failure in the 
activation of a programmed sequence, as determined by 
said monitoring, is made to cause a complete or partial 
reset of said programmed system, 

10 

A method of monitoring the activation of N 
programmed sequences in a programmed system, each to be 
executed iteratively, N being an integer greater than 
1^ wherein each of said N programmed sequences is 
IS monitored by at least one other programmed sequence, 

9* The method of claim 8, wherein each of said N 
programmed sequence is monitored by each of the N-l 
other prograiEimed sequences* 

20 

10. The method of claim 8, wherein each programmed 
sequence performs the monitoring function by 
incrementing a value in a respective counter associated 
with each programmed sequence it monitors and by 

25 checking, for each said counter, that the corresponding 
value has not reached a predetermined threshold, and 
wherein each monitored programmed sequence resets the 
counter associated therewith, a failure in the 
activation of a particular programmed sequence being 

30 detected when a counter associated with that sequence 
reaches a predetermined threshold, 

11. The method of claim 10, wherein, for a given 
counter, said predetermined threshold is established so 
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as to be reacheci upon just one failure of the 
associated programmed sequence to reset that counter. 

12, The method of claim 8, wherein said N programmed 
5 sequences are taken from the group consisting of: 
routines and main program loops. 

13* The method of claim 8, wherein said programmed 
sequences comprise interrupt routines- 

10 

14. The method of claim 13, wherein said interrupt 
routine is triggered by an event generated by a timer 
or an external signal, 

15 15, The method of claim 8, wherein a failure in the 
activation of a programmed sequence, as determined by 
said monitoring, is made to cause a complete or partial 
reset of said programmed system. 

20 X6, A computer program comprising at least a first and 
a second programmed sequence, each to be executed 
iteratively, wherein said first programmed sequence 
incorporates instructions for monitoring the execution 
of said second programmed sequence, and said second 

25 programmed sequence incorporates instructions for 
monitoring said first programmed sequence. 

17. The program of claim 16, wherein said programmed 
sequences are taken from the group consisting of: 
30 routines and main program loops. 



IS* The program of claim 17, wherein said programmed 
sequences comprise interrupt routines. 



16/11 ^00 JEU 14:56 FAS 33 1 45019828 



CBT BALLOT SCHMIT 



FLEIT BONGINI 



aois 



17 

19- The program of claim 16, wherein said first 
programmed seguence comprises the st^ps of resetting a 
first counter associated therewith and incrementing a 
second counter associated with said second programmed 
5 seguence, and said second programmed sequence comprises 
the steps of resetting said second counter and 
incrementing said first counter, a failure in the 
activation of a particular programmed sequence being 
detected when a counter associated with that sequence 
10 reaches a predetermined threshold. 

20 • The program of claim 19, wherein, for a given 
counter, said predetermined threshold is established so 
as to be reached upon just one failure of the 
15 corresponding programmed sequence to reset that 
counter. 

21. A medium containing the program according to any 
preceding program claim. 

20 

22. A computer program comprising N programmed 
sequences, each to be executed iteratively, N being an 
integer greater than 1, wherein each of said programmed 
sequences is monitored by at least one other programmed 

2B sequence, 

23- The program of claim 22, wherein each programmed 
sequence i^ monitored by each of the N-1 other 
programmed sequences. 

30 

24. The program of claim 22, wherein each programined 
sequence comprises program steps for incrementing a 
value in a respective counter associated with each 
programmed sequence it monitors and for checking, for 
35 each said counter, that the corresponding value has not 
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reached a predetermined threshold, and wherein each 
monitored programmed sequence resets ths counter 
associated therewith, a failure in the activation of a 
particular programmed sequence being detected when a 
5 counter associated with that sequence reaches a 
predetermined threshold. 

25. The program of claim 22, wherein said programmed 
sequences are taken from the group consisting of: 

10 routines and main program loops. 

26, The program of claim 25/ wherein said programmed 
sequences comprise interrupt routines* 

15 21. A medium containing the program according to any 
preceding program claim* 

28* A programmed apparatus for executing iteratively 
at least a first and a second programmed sequence, 
20 comprising first means associated with said first 
programmed sequence to monitor the execution of said 
second programmed sequence/ and second means associated 
with said second programmed sequence to monitor said 
first programmed sequence* 

25 

29, The apparatus of claim 28, wherein said programmed 
sequences are talcen from the group consisting of: 
routines and main program loops. 

30 30. The apparatus of claim 28, wherein said programmed 
sequences comprise at least one interrupt routine. 



35 



31. The apparatus of claim 30, wherein said interrupt 
routine is triggered by an event generated by a timer 
or an external signal. 
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32 • The apparatus of claim 28, wherein said first 
means comprise means for resetting a first counter 
associated therewith and means for incrementing a 
5 second counter associated with said second means, and 
said second means comprise means for resetting said 
second counter and incrementing said first counter, 
said apparatus toeing operative to detect a failure in 
the activation of a particular program^ued sequence when 
XO a counter associated with that sequence reaches a 
predetermined threshold* 

33. The apparatus of claim 32, wherein said 
predetermined threshold is established so as to be 

15 reached upon just one failure of a prograitiTtied sequence 
to reset the corresponding counter, 

34. The apparatus of claim 28, wherein a failure in 
the activation of a programmed sequence, as determined 

20 by said monitoring/ is made to cause a complete or 
partial reset of said apparatus* 

35. An apparatus for executing at least N programmed 
sequences, each to be executed iteratively, N being an 

25 integer greater than 1, wherein each of said N 
prograTnmed sequences is monitored by at least one of 
the N-1 other programmed sequence. 

36. The apparatus of claim 35, wherein each programmed 
30 sequence is monitored by each of the other 

programmed sequences. 

37. The apparatus of claim 35, wherein each of said N 
programmed sequence is arranged to effect said 

35 monitoring function by incrementing a value in a 
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counter associated with each respective programmed 
sequence it monitors and by checXing, for each said 
counter, that the corresponding value has not reached a 
predetermined threshold/ and v^herein each monitored 
5 programmed sequence is arranged to reset the counter 
associated therewith, a failure in the activation of a 
particular programmed sequence being detected when a 
counter associated with that sequence reaches a 
predetermined threshold, 

10 

38, The apparatus of claim 37, wherein said 

predeterTftined threshold is established so as to be 
reached upon just one failure of a programmed sequence 
to reset the corresponding counter, 

15 

39* The apparatus of claim 35/ wherein said programmed 
sequences are taken from the group consisting of: 
routines and main program loops. 

20 40. The apparatus of claim 39, wherein said programmed 
sequences comprise interrupt routines. 

41, The apparatus of claim 40, wherein said interrupt 
routines are triggered by events generated by a timer 

25 or external signals. 

42. The apparatus of claim 35; wherein a failure in 
the activation of a programmed sequence, as determined 
by said monitoring, is made to cause a complete or 

30 partial reset of said apparatus. 
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ABSTRACT 

METHOD OF MONITORING THE ACTXVAa?ION OF PROGR2^ED 
SEQUENCES OP A PROGRAMMED SYSTEM MID COMPUTER PROGRAM 
AND APPARATUS POR IMPLEMENTING SAME 



The activation of programmed sequences to be 
executed iteratively is monitored by the sequences 

10 themselves, a sequence being conferred the additional 
function of monitoring at least one other sequence- 
The sequences can be in the form of routines, e,g* 
interrupt routines, and main program loops normally 
implemented in a programmed system ► 

^^or instance y each programmed sequence performs 
the monitoring function by incrementing a value in a 
respective counter associated with each programmed 
sequence it monitors and by checking, for each counter, 
that the corresponding value has not reached a 

20 predetermined threshold • Each monitored programmed 
sequence resets the counter associated therewith* A 
failure in the activation of a particular programmed 
sequence is detected when a counter associated with 
that sequence reaches a predetermined threshold. 

25 The invention also relates to a computer program 

and a programmed apparatus implementing this concept* 



Figure 3 
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